[b]6.0 Summary[/b]In conclusion, the first and foremost analysis on the video files is the authenticity of the both videosas listed in Table 1.5.1 and Table 2.1.1. In YouTube channel, Video 1 - `SSU, Radio interception ofconversations between terrorists, "Boeing-777" plane crash’ showing that it was published on the 17thJul 2014 but the encoded/created date was showing 01/11/2018 ~ 02:44:30 (UTC) which is after ~ 4 years3 months of MH17 fatal incident happened (17/7/2014). Video 1 date modified (in YouTube header) isalso showing last modified on 1st Nov 2018 (Refer Figure 2.1.1.3). This clearly means that this video is notgenuine and had been tampered and can’t be accepted as digital evidence to relied upon. Refer to Section1.8 showing the Timeline.In Video 2 - 'MH17 crash: leaked tape proven FAKE by audio analysis. Анализ перехватаразговоров ополчения ДНР.', the published date is showing as 17th Jul 2014 and last modified date (inYouTube header) showing last modified on 4th Aug 2014 (Refer Figure 2.1.2.3). This also showing the videois also considered not genuine. Refer to Section 1.8 showing the Timeline.Forensic verification analysis of the audios in Video 1, there was no any metadata showing anydetails of the audio tracks original source of the recorded audio tracks, thus making the audio tracks inthis Video 1’s audio stream cannot be trusted/relied upon, not genuine, as it has no authenticity andcannot be accepted as any kind of digital evidence.The audio forensic analysis on the main audio streams of Video 1 showing there are total of 3separate audios files with 5 tracks of audio conversation between militants were aired in Video 1 audiostream as listed below. Refer to Table 3.2.1 and Figure 4.4 showing the details of Audio tracks.i. Audio 1, Track 1 - Time Frame: 0:18.3 – 0:36.1 (a mono channel recorded audio track)ii. Audio 2, Track-2 - Time Frame: 0.43.3 - 0.52.9 (a stereo channel recorded audio track)iii. Audio 2, Track-3 - Time Frame: 0.54.5 - 1:08.0 (a stereo channel recorded audio track)iv. Audio 2, Track-4 -Time Frame: 0.54.5 - 1:08.0 (a stereo channel recorded audio track)v. Audio 3, Track-5 - Time Frame: 1:50 - 2:22.8 (a mono channel recorded audio track)All the recorded audios tracks quality is very low, and the original source of the intercepted audioremain unknown. The audio recorded tracks channel in Video 1 are inconsistent with some are monorecorded audio and some are stereo recorded audio. This clearly showing that multiple source of the audio

track recorded were taken to composed into Video 1 audio stream. Refer to Table 3.1.2 showing Video 1Audio Tracks Analysis.Forensic analysis on these audio tracks spectral and noise floor showing there are several anomaliesand few edits with missing/inconsistence of recorded audio tracks in Video 1 - SSU, Radio interception ofconversations between terrorists, "Boeing-777" plane crash.mp4. The edits, merging of other sources ofaudios tracks and cuts were seen as below. Refer to Section 4.0.a. In Audio 1, Track 1 - below are the edition/manipulation seen.i. Refer to Figure 4.4.1.1- Background noises appear in the V. Gernanin’s part of audio Track-1 (Left Channel) are differentat 0.18.5, 0:25.75 & 0:31:5. The noise is different suddenly once he starts to talk. The backgroundnoise in between of phrases present in Audio 1- Track 1 between the duration of 0:19.5 and0:25.5, between 0:26.8 and 0:31.4 and between 0:32.6 and 0:36.0.- Arrows (bottom – up) showing merging of audios at 0:22.5, 0:23.5 and 0:30:5.ii. Refer to Figure 4.4.1.2:- Figure 4.4.1.2: A gap which appears at the end of third phrase ~0:32.6 uttered by V. Gernanin inthe audio Track-1 (Left Channel) is possible indication that Geranin voices are merged into theconversation.- Audio spectral at 0:31.75 – 0:31.85 (Left Channel) showing added cut, paste and merger of othersound in this audio.iii. Refer to Figure 4.4.1.3:- Bezler’s voice audio Track 1 (Right Channel) have long pauses after each phrase, appears strange.- Long pauses seen between 0:24.7 and 0:25.7, between 0:26.55 and 0:27.55, between 0:36 and0:31.45, between 0:32.4 and 0:33.5- Arrows in Left Channel showing merging of audios at 0:22.5, 0:23.5 and 0:30:5.iv. Refer to Figure 4.4.1.4:- Right Channel - It appears that the audio was cut down and merged at 0:23.20 from the end of aconversation. Different audio conversation starts at 0:23.30.- Left channel (arrow up-bottom) showing merging of audio at 0:23.43.b. In Audio 2, Track 2 - below are the edition/manipulation seen.i. Refer to Figure 4.4.2.1:- SSU, radio interception of conversations between militants, Boeing-777 plane crash.mp4, Audio2 and Track-2 conversation between- Major and Grek audio duration between 0:43.3 – 0:52.9. Possible edit can be seen as the noiselevel is different

c. In Audio 2, Track 3 - below are the edition/manipulation seen.i. Refer to Figure 4.4.3.1- In Audio 2, Track-3, background noises are not similar in this part from 0:58:75 and 0:59:0.- At 0:58.85 another difference noise was seen.ii. Refer to Figure 4.4.3.2- In Audio 2, Track-3, possible edits can be seen between 1:03:85 and 1:04:55, background noisesuddenly appears from nowhere completely unrelated to the speakers’ background atmosphere.d. In Audio 2, Track-4 - below are the edition/manipulation seen.i. Refer to Figure 4.4.4.1- In Audio 2, Track-4 possible edits can be seen between 1:13:55 and 1:13:5 and between 1:15:20and 1:16:20- Background noise suddenly appears from nowhere completely unrelated to the speakers’atmosphere.ii. Refer to Figure 4.4.4.2- In Audio 2 Track-4, possible edits can be seen between 1:18:80 and 1:19:30- Background noise suddenly appears from nowhere completely unrelated to the speakers’atmosphere.iii. Refer to Figure 4.4.4.3- Failed to overlay the merging between time frame 1:24.20 and 1:24.30 another merging between1:24.50 and 1:24.85.- Hearing showing different speaker in this track,iv. Refer to Figure 4.4.4.4- A new person’s voice appears between 1:09.5 and 1:49.0. However, SBU stated that theconversation was between Major and Grek.e. Audio 3, Track-5 - below are the edition/manipulation seen.i. Refer to Figure 4.4.5.1- Audio 3 Track-5 begins from 1:50.2 and ends at 2:22.7. This segment of audio has 3 differentindividual voices.- Two different channel seen showing two difference source of audio recordings.- it appears to be two different militants speaking to Kozitsyn.- Cut of audio in Right channel at ~1:51.0 – 1:54.0, ~1:57.5-2:00.0, ~2:01.0-2:02.5, ~ 2:04.5-2:07.5& ~2:10.5-2:12.0ii. Refer to Figure 4.4.5.2

- Possible merging can be seen between 2:02.94 and 2:02.97 (Left Channel), also sudden differencein the spectrum frequency- from 2:02:98iii. Refer to Figure 4.4.5.3- Muffled and no background noise appears were seen between 1:50.2 and 1:53.6 (Right Channel).- However, background noise appears normal after 1:53.8 till the end of the track. There are twodifferent channels in this track. Left Channel - (Arrow Up-Bottom) showing adding of audiobetween ~2:12.6 and 2:14.2.- Right Channel (Arrow Up-Bottom) showing merging ~2:12.3 until 2:22.28. This is clearediting/adding of audiosFurther analysis on the audio tracks were performed where set of voice samples were taken for detailsvoice analysis where comparison of voices can be performed to identify speakers on each audio track canbe identified if they are same speaker or different but unfortunately none of the voices are meeting therequirement for voice biometric analysis/comparison as it has very short speech below 15 seconds and itis the audio quality is low.As a summary, all 5 audio tracks in the Video 1 - `SSU, Radio interception of conversations betweenterrorists, "Boeing-777" plane crash’ published in YouTube by SSU is faked, tampered and not genuine.Release the original and genuine audio tracks officially is highly recommended.Refer to Section 1.7 showing the Executive Summary of the video and audio stream analysis andSection 1.8 showing the Timeline of the Videos. Refer to Section 3.1 showing the Video File Analysis andStatements and Section 3.2 showing Audio Track Analysis and Finding Statements for further reference.

DISCLAIMER The information and contents of this document is confidential. It is intendedsolely for the use of Bonanza Media and its appointed solicitor and appointedother professionals. Save and except the forgoing anyphotocopy/extraction/imaging without the permission of OG IT Forensic Servicesis strictly prohibited. OG IT Forensic Services makes no representation orwarranties with the respect to the contents or use of this document, andspecifically disclaims any express or implied warranties or usefulness for anyparticular purpose of this publication. OG IT Forensic Services reserve the right tochange or revise this document, at any time. I confirm the correctness of my expert report and understand that in giving myreport my overriding duty is to the court and that I have complied with that duty.

DIGITAL AUDIO ACCEPTANCE AS DIGITALEVIDENCEAny digital audio submission as digital evidence to court of law can only be accepted withbelow requirement;i. The source of origin media where the digital audio was recorded (Authenticity)ii. The source of origin where digital audio was stored (storage of media) (Authenticity)iii. The audio recording metadata (Details of when audio was recorded) (Authenticity)iv. The acquisition of the audio must be done from the media / storage of the media(Must be preserved)v. The part of audio track can be extracted but it has to be clearly showing the source oforigin media, storage and audio details.Confidential OG IT Forensic Services 3ISO/IEC 27037.. Digital Forensics standards for good practice methods and processes for forensiccapture and investigation of digital evidence.

CAN THE PART OF AUDIO TRACKEXPORTED FROM VIDEO? The part of audio track can be extracted from video’s audio stream. The audio stream does maintain the sound waves,spectrogram and the noise floor which can be used to analyse for tampering. This is regardless what codec has been converted. A spectrogram is a visual representation of the spectrum of frequencies of a signal as it varies with time. When applied to anaudio signal, spectrograms/waveform are sometimes called sonographs, voiceprints, or voicegrams It is important to have the source of origin media, storage and audio details as verification of the audio tracks.“The Video - SSU, radio interception of conversations between terrorists, Boeing-777 plane crash” (source from uploaded YouTubevideos) analysis was focused more on the audio streams as the audio aired in the video was the intercepted recorded audioconversations.Spectogram Noise Floor

WHERE IS THE SOURCE OF THE AUDIOTRACK COMING FROM ? It is intercepted by some agencies…. This is using special audio interception devices by agencies.. There are special device used to intercept live phone calls or any radio transmission. Agencies may have the vast intercept in the air where all the signal can be captured. From my view on these intercepted audio track, I am seeing may background noise of peopletalking… So this clearly showing that these intercept calls were recorded, stored in a storage and thenthe specific audio track were filtered with special filtration. The filtration can capture the specific speaker, but it does leave some overlapping voices.. So, the reporting of how the source of audio track was obtain must be shown/documented &presented.